Core Service
Standards, Compliance & Governance
Standards we build to, and help clients certify against. We work to these frameworks in our own operations and design every client programme against them from the outset, so certification is achievable rather than retrofitted.
| STANDARD OR REGIME | WHERE IT SITS | WHAT COMPOUND BRIDGE DOES |
|---|---|---|
| ISO/IEC 27001, 27017, 27018 and 27701 | Programme and platform layer. Certification in progress | We operate to these frameworks today and are working towards certification. Client programmes are designed against the controls from day one. |
| Uptime Institute Tier certification | Facility layer | Design and constructed-facility certification specified as a contractual deliverable on every build. |
| EU Code of Conduct for Energy Efficiency in Data Centres | Facility layer | We deploy into certified endorser facilities, which positions the estate as green-finance ready and affects the cost of capital available. |
| National data protection legislation | Client operating entity, including POPIA and equivalent statutes | Data residency, cross-border transfer restrictions and lawful-basis mapping designed into the architecture at the outset. |
| ICT governance and standard operating procedures | Programme layer, Compound Bridge | Delivery governance, information security policies and standard operating procedures written to ISO/IEC 27001 practice and handed over with the estate. |
Our undertaking. Where a certification is held by a party in the programme, the scope statement and audit report are supplied before signature.
Data Sovereignty
Operating across African borders requires strict adherence to local data localisation laws. We architect hybrid systems that keep sensitive data on-premise while leveraging public clouds for non-sensitive compute.
- Localisation Audits
- POPIA / GDPR Alignment
- Secure Edge Deployments
Cross-Border AI Workloads
Training and inferencing LLMs often requires moving massive datasets across jurisdictions. We implement the legal and technical frameworks to allow compliant cross-border data flows.
- Transfer Impact Assessments
- Encryption Routing
- Multi-Region Architecture
AI Governance Frameworks
We help you establish internal AI policies that mitigate bias, ensure explainability, and protect intellectual property, keeping your organisation ahead of impending AI regulations.
- Internal Acceptable Use
- Ethical AI Guardrails
- Audit Trail Implementation